Jon Rault

Head of CloudSec at @trustoncloud. Checkout our S3 ThreatModel and

[TrustOnCloud @trustoncloud]

Today we are open-sourcing @sigma_hq rule packages for AWS S3 and GCP BigQuery.

We have taken the detective controls from our threat models, the ones that already say exactly what to look for in the logs, and expressed them as Sigma rules so customers can deploy them without rewriting the logic by hand.

This release covers 15 AWS S3 controls and 4 GCP BigQuery controls, all built on the native cloud log source (CloudTrail for AWS, Cloud Logging for GCP).

Learn more: https://t.co/bTa9WPYZyI

#sigma #aws #gcp #controls #cloudsec #trustoncloud

[TrustOnCloud @trustoncloud]

🦟New Blog: Confused Deputy Flaw in Amazon DataZone

The TrustOnCloud team identified a critical Confused Deputy vulnerability in Amazon DataZone, potentially allowing unauthorized access across AWS accounts.

Full details: https://t.co/wB1T0BaUnk #CloudSecurity #AmazonDataZone #Cybersecurity #TrustOnCloud

[Nick Frichette @Frichette_n]

New confused deputy vuln found in an AWS service! Nice work TrustOnCloud team!
https://t.co/hlguEciq9v

[TrustOnCloud @trustoncloud]

We're excited to be sponsoring @fsisac 2024 EMEA Summit in Berlin. Get the full details here: https://t.co/7Ph7Quopee #fintech #fsisac #cloudsecurity #trustoncloud

[TrustOnCloud @trustoncloud]

🎉Delighted to announce that we have been featured on Latio's esteemed "Boundary Breakers" list! Latio Tech is on a mission to help organizations discover the best security tools, completely free from vendor bias.

💙 Love what we do? We'd appreciate your support by upvoting us on the 'Boundary Breakers' list. You can also explore other outstanding tools listed that could enhance your security posture.

Learn more➡️ https://t.co/3Ogt2GbqmZ
#TrustOnCloud #CloudSecurity #Innovation

[TrustOnCloud @trustoncloud]

🛡️New Blog: How I bypassed the control plane in Azure OpenAI

While completing the ThreatModel for Microsoft Azure OpenAI, our CTO Tyson Garrett discovered a way to allow the management of Azure OpenAI deployments via the Data Plane, resulting in the loss of significant security controls.

Read more➡️ https://t.co/J3T1j5jhHP

#openai #threatmodel #azure #cloudsecurity #Microsoft #APIsecurity #API #Cyber

[Jon Rault @jo_n_go]

@trustoncloud @TMConnectHQ A packed room and a great event. It really shows the eagerness of the industry on practical threat modeling!A packed room and a great event. It really shows the eagerness of the industry on practical threat modeling!

[Jon Rault @jo_n_go]

@zig_max Really cool!

[TrustOnCloud @trustoncloud]

This #CyberSecurityAwarenessMonth, enhance your cloud security with a free threat model from our 140+ offerings. You can streamline your cloud transition and navigate its intricacies with ease.

Claim your Free ThreatModel➡️ https://t.co/HknJaYdkX3 #CloudSecurity #TrustOnCloud

[TrustOnCloud @trustoncloud]

Stay on top of cloud security knowledge with TrustOnCloud! 120+ services, easy-to-explore threat models, and quarterly updates. Get confident through knowledge!

[fwd:cloudsec @fwdcloudsec]

Thank you to our Bronze sponsors: @clearvectorhq, @netflix, @NetSPI, @Resourcely, @SkyhawkCloudSec, and @trustoncloud!

[Jon Rault @jo_n_go]

FYI where it appears https://t.co/SV7lND1Gd0

[Jon Rault @jo_n_go]

Well, maybe you should do release notes and not expose your local wiki @awscloud @AWSSupport😉

[TrustOnCloud @trustoncloud]

TrustOnCloud's ThreatModels are now on AWS Marketplace & Data Exchange!
💵 Accelerate procurement & enable EDP
🔒 Simplify secure data delivery

Explore: https://t.co/LIzOVTtpkH

Free S3 ThreatModel soon! Azure next? 😉

#CloudSecurity #ThreatModeling #AWS #TrustOnCloud

[TrustOnCloud @trustoncloud]

Cloud services are constantly evolving. It can be good or bad for Security folks. Tools are there to help.

A 🧵

[TrustOnCloud @trustoncloud]

NEW BLOG: Want to hack Amazon Cognito?

Our team has developed a lab for @RhinoSecurity #CloudGoat that lets you hack two common security misconfigurations using #awscloud Cognito.

Read the walkthrough https://t.co/E0cIBderf8

#cloudsecurity

[TrustOnCloud @trustoncloud]

https://t.co/pNqm6hzsAF is dead. Long live https://t.co/gaJeLGV1lr

[Jon Rault @jo_n_go]

@uptill_3 @AWSSupport AWS has some level of durability. But for the shared responsabilty: depends on you, if you care not to lose any with high certainty (e.g., worried about attackers deleting the logs?), or if you have regulatory requirements, then yes. There is an export to S3 BTW.

[Jon Rault @jo_n_go]

@0xdabbad00 +1, MFA Delete is a control we specifically excluded from the open-source S3 ThreatModel because of its legacy design (see S3.T16 for ransomware on https://t.co/5tnUVXeR35)